1784 matches found
PDF-XChange Editor 安全漏洞
PDF-XChange Editor is a PDF-XChange company running on Microsoft Windows systems in the PDF file viewer software. PDF-XChange Editor suffers from an out-of-bounds read vulnerability that can be exploited by attackers to disclose sensitive information...
phiola 安全漏洞
phiola is a fast audio player, recorder, and converter for Windows, Linux, and Android by Simon Zolin Personal Developer. A security vulnerability exists in phiola version v2.0-rc22, which stems from the presence of a buffer overflow vulnerability that could allow a remote attacker to execute...
The vulnerability of the OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the OLE DB driver for SQL Server on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the OLE DB driver for SQL Server on Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the OLE DB driver for SQL Server on Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
PT-2024-28803 · Logitech · Logitech Mevo Webcam App
Name of the Vulnerable Software and Affected Versions: Logitech MEVO WEBCAM APP affected versions not specified Description: The issue concerns an Unquoted Search Path or Element vulnerability in the Logitech MEVO WEBCAM APP on Windows, allowing for Local Execution of Code. Recommendations: At th...
PT-2024-28797 · Beyondtrust +1 · Beyondtrust U-Series Appliance +1
Name of the Vulnerable Software and Affected Versions: BeyondTrust U-Series Appliance versions 3.4 through 4.0.2 Description: The issue is related to improper privilege management, allowing privilege escalation. This is due to a vulnerability in the local appliance API modules on Windows, 64-bit...
PT-2024-7900 · Okta · Okta Verify
Name of the Vulnerable Software and Affected Versions: Okta Verify versions 5.0.2 through 5.3.2 Description: The issue is related to the Okta Device Access feature in the Okta Verify agent for Windows, which provides access to the OktaDeviceAccessPipe. This allows attackers on a compromised devic...
SolidWorks 安全漏洞
SolidWorks is a 3D CAD software from SolidWorks that runs on the Microsoft Windows platform. A security vulnerability exists in SolidWorks version 2024 that originates from a vulnerability that allows an attacker to execute arbitrary code when opening a specially crafted CATPART, DWG, DXF, IPT, J...
The vulnerability of the Global Protect Agent for Windows’ software protection suite lies in the insecure management of privileges, allowing attackers to escalate their privileges.
The vulnerability of the Global Protect Agent for Windows endpoint protection software is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
PT-2024-5241 · Node.Js +1 · Node.Js +1
Name of the Vulnerable Software and Affected Versions: Node.js versions 18.x, 20.x, and 21.x Description: The issue is related to the improper handling of batch files in child process.spawn and child process.spawnSync on Windows platforms. This allows a malicious command line argument to inject...
SMB Fetch, Windows x64 Bind Named Pipe Stager
Fetch and execute an x64 payload from an SMB server. Listen for a pipe connection Windows x64 Module Options msf use payload/cmd/windows/smb/x64/meterpreter/bindnamedpipe msf payloadbindnamedpipe show actions ...actions... msf payloadbindnamedpipe set ACTION msf payloadbindnamedpipe show options...
CVE-2023-27301
Improper access control in some IntelR ThunderboltTM DCH drivers for Windows before version 88 may allow an authenticated user to potentially enable escalation of privilege via local access...
Zoom's multiple product security vulnerabilities
Zoom Meeting SDK and Zoom VDI Client are both products of Zoom Corporation, U.S.A. Zoom Meeting SDK is a development kit. Enables your company to accelerate the development and build of fully customizable video-based applications by leveraging the performance, scale, and reliability of Zoom's...
PT-2024-2881 · Intel · Intel Thunderbolt Dch Drivers
Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to improper buffer restrictions in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to potentially...
PT-2024-11942 · Forcepoint · Forcepoint F|One Smartedge Agent
Name of the Vulnerable Software and Affected Versions: Forcepoint F|One SmartEdge Agent versions prior to 1.7.0.230330-554 Description: The issue is related to a Missing Authorization vulnerability in the bgAutoinstaller service modules of Forcepoint F|One SmartEdge Agent on Windows, allowing...
The vulnerability of the Splunk Enterprise platform for operational analysis in Windows operating systems lies in the restoration of unreliable data in memory, allowing attackers to compromise the integrity, accessibility, and confidentiality of the protected information.
The vulnerability of the Splunk Enterprise operating system for Windows platform lies in the recovery of unreliable data in memory due to an incorrect path being used to access files on the disk partition. Exploiting this vulnerability can allow an attacker to compromise the integrity,...
PRTG Authenticated Remote Code Execution
class MetasploitModule 'PRTG CVE-2023-32781 Authenticated RCE', 'Description' = %q Authenticated RCE in Paessler PRTG , 'License' = MSFLICENSE, 'Author' = 'Kevin Joensen ', 'References' = 'URL', 'https://baldur.dk/blog/prtg-rce.html', 'CVE', '2023-32781' , 'DisclosureDate' = '2023-08-09',...
CVE-2024-0770
A vulnerability, which was classified as critical, was found in European Chemicals Agency IUCLID 7.10.3 on Windows. Affected is an unknown function of the file iuclid6.exe of the component Desktop Installer. The manipulation leads to incorrect default permissions. The attack needs to be approache...
CVE-2024-22410 Binary Planting Attack on Windows Platforms in Creditcoin
Creditcoin is a network that enables cross-blockchain credit transactions. The Windows binary of the Creditcoin node loads a suite of DLLs provided by Microsoft at startup. If a malicious user has access to overwrite the program files directory it is possible to replace these DLLs and execute...